£500,000 ICO fine for Facebook

The BBC is reporting that Facebook has been fined £500,ooo by the ICO for its role in the Cambridge Analytica data scandal, the maximum fine pre GDPR. …In July, the ICO notified the social network that it intended to issue the maximum fine. Confirming the fine, it said in a statement: “Between 2007 and 2014,…

Read More

Heathrow Airport fined £120,000 for lost USB stick

The BBC is reporting that a lost USB stick containing personal information cost Heathrow Airport £120,000 in ICO fines It comes after a staff member lost a USB stick last October containing “sensitive personal data”, which was later found by a member of the public… The Information Commissioner’s Office (ICO) said the memory stick, which…

Read More

Typeform Data Breach – the list gets longer

Several days after Typeform reported that a backup had been accessed by an unknown third party, the list of companies affected is continuing to grow. The ICO has said; “If your organisation has been affected by the Typeform incident and you have enough information to establish that there may be a risk to your customers,…

Read More

Cash Converters warns customers over website data breach

The BBC is reporting that Cash Converters, the high street pawnbroker, has warned customers about a data breach on its website. The company said customer usernames, passwords and addresses had potentially been accessed by a third party. The data breach exposed accounts on the company’s old UK website, which was replaced in September 2017. The…

Read More

44 million Britons’ personal details feared stolen from Equifax

The Telegraph is reporting that personal data of up to 44 million British consumers was feared stolen in a massive cyber attack. …Equifax admitted hackers had exposed the personal data of 143 million customers in the US, which was stolen between mid-May and July this year… However the hack was not made public until now.…

Read More

GDPR – new law equals bigger fines for getting it wrong

The BBC is reporting that new data laws could end up bankrupting companies if they fail to look after personal data. The European Union’s General Data Protection Regulation (GDPR) comes into force in May 2018, radically changing the way organisations have to look after our personal data. Failure to comply could lead to huge fines,…

Read More

Gloucester City Council fined £100,000 after a cyber attack

The ICO reports that Gloucester City Council has been fined for leaving personal information vulnerable to attack. The Information Commissioner’s Office (ICO) has fined Gloucester City Council £100,000 after a cyber attacker accessed council employees’ sensitive personal information. The attacker took advantage of a weakness in the council’s website in July 2014, which led to…

Read More